This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer File: UpylpuXWdCHz8s0hE4y3BwSFCVU.cer (raw, json) Hash identifier: k4VINTAkMf/A5qTpwa8N9aoppsZ2s/dSw/op1YziCqQ= Subject key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C125F0E4834ECCA64CD998DE5E26186 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205385 IP: 185.220.48.0/22 IP: 185.231.36.0/22 IP: 2a0b:eec0::/32 IP: 2a0c:3f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5f:0e:48:34:ec:ca:64:cd:99:8d:e5:e2:61:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=529ca5a6e5d67421f3f2cd21138cb70704850955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:90:e6:f8:87:12:44:dc:22:fe:6d:ce:ab: 92:55:63:4e:47:b2:72:f1:bf:09:d4:a0:38:1a:3b: 64:bb:e4:9f:97:24:bd:ac:d7:a0:cd:46:41:4a:bc: 38:f8:56:a7:1f:65:0e:e2:a9:54:e7:8d:56:5e:3d: e8:c7:30:17:58:ab:0e:ed:33:96:8d:e4:62:fe:b0: db:5a:c3:11:9b:53:65:bb:7b:cc:3c:13:74:e1:3a: 92:4a:de:35:46:28:dc:0f:e9:4a:24:50:b9:3c:ec: 36:34:88:4a:c4:f4:d4:df:ff:01:b4:f8:04:6a:6b: 7f:8c:5a:91:e8:dd:22:1f:6c:76:de:f8:ea:58:db: d5:7f:89:06:87:7c:7c:11:e6:b9:98:f1:a5:2e:f1: 87:0c:74:4c:f1:96:6c:34:18:ff:9e:05:81:94:54: e3:e1:48:a5:12:72:e7:f2:b9:64:9b:04:54:bd:8a: cd:09:92:bb:64:5b:43:9b:5f:f1:d2:a5:c1:f9:2b: 56:c6:90:a6:d6:b8:b1:eb:0b:2a:55:90:94:59:f7: 37:38:d1:54:0b:85:f4:95:68:8e:b3:cb:5c:6a:df: b5:27:f5:c4:fa:1d:de:13:44:40:2e:d7:c5:01:07: a3:4a:61:fc:68:61:7f:27:92:d1:e8:80:07:d1:11: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.48.0/22 185.231.36.0/22 IPv6: 2a0b:eec0::/32 2a0c:3f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205385 Signature Algorithm: sha256WithRSAEncryption 5a:40:85:7d:09:dd:6d:51:9b:f8:bc:86:7d:41:67:bc:e0:64: 80:d9:8e:c8:b9:b8:89:6a:1a:69:54:77:84:10:36:14:bb:77: 08:40:1e:70:e7:12:0f:0e:40:bd:18:d0:59:44:b9:f1:03:6f: 3b:df:22:e8:79:f0:34:c0:82:64:85:3b:c4:07:de:4f:7a:4b: 8a:68:48:f9:71:e5:58:04:de:b5:1a:89:d2:60:bd:74:58:62: ed:20:0a:6e:26:65:e3:9b:62:ad:d6:82:e7:a7:d0:51:53:97: d1:f7:63:b3:77:3d:d1:84:72:0e:ac:1b:97:ca:2a:a4:54:7a: 50:21:1d:2a:19:a5:ac:a6:18:05:a2:27:de:9e:cd:17:2b:fb: 2f:f8:cc:7a:c9:cb:5d:27:0f:55:5f:98:6f:7d:81:37:fd:fa: 89:92:40:fd:13:be:7f:f3:25:59:a4:c6:15:f9:3b:93:f3:19: 26:53:6c:7c:73:86:4b:35:07:3f:96:ba:54:79:4f:a0:7b:a7: 6c:07:97:fe:20:cb:f1:19:67:cc:39:bd:d4:6e:d0:91:7d:f7: 8c:71:30:56:ac:6b:11:45:b4:bd:98:59:5a:b5:9f:33:65:f6: 3e:97:5f:da:c7:21:7b:b9:c8:b2:46:96:04:24:f3:e7:5a:34: f9:d7:76:be -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8El8OSDTsymTNmY3l4mGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjljYTVhNmU1ZDY3NDIxZjNmMmNkMjExMzhjYjcwNzA0ODUwOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWqQ5viHEkTcIv5tzquSVWNOR7Jy 8b8J1KA4Gjtku+SflyS9rNegzUZBSrw4+FanH2UO4qlU541WXj3oxzAXWKsO7TOW jeRi/rDbWsMRm1Nlu3vMPBN04TqSSt41RijcD+lKJFC5POw2NIhKxPTU3/8BtPgE amt/jFqR6N0iH2x23vjqWNvVf4kGh3x8Eea5mPGlLvGHDHRM8ZZsNBj/ngWBlFTj 4UilEnLn8rlkmwRUvYrNCZK7ZFtDm1/x0qXB+StWxpCm1rix6wsqVZCUWfc3ONFU C4X0lWiOs8tcat+1J/XE+h3eE0RALtfFAQejSmH8aGF/J5LR6IAH0RFsWwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFFKcpabl1nQh8/LNIROMtwcEhQlVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzYwZjlh Yy0wNTNhLTQ2ODktYjA4MS0zYTNhOWYwMjQyYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvNjBmOWFj LTA1M2EtNDY4OS1iMDgxLTNhM2E5ZjAyNDJiOC8xL1VweWxwdVhXZENIejhzMGhF NHkzQndTRkNWVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCudwwAwQCueckMBQEAgACMA4DBQAqC+7AAwUD Kgw/ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIkkwDQYJKoZIhvcNAQELBQAD ggEBAFpAhX0J3W1Rm/i8hn1BZ7zgZIDZjsi5uIlqGmlUd4QQNhS7dwhAHnDnEg8O QL0Y0FlEufEDbzvfIuh58DTAgmSFO8QH3k96S4poSPlx5VgE3rUaidJgvXRYYu0g Cm4mZeObYq3Wguen0FFTl9H3Y7N3PdGEcg6sG5fKKqRUelAhHSoZpaymGAWiJ96e zRcr+y/4zHrJy10nD1VfmG99gTf9+omSQP0Tvn/zJVmkxhX5O5PzGSZTbHxzhks1 Bz+WulR5T6B7p2wHl/4gy/EZZ8w5vdRu0JF994xxMFasaxFFtL2YWVq1nzNl9j6X X9rHIXu5yLJGlgQk8+daNPnXdr4= -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:01 2026 by rpki-client